Medium severity6.5NVD Advisory· Published Nov 5, 2026· Updated Nov 5, 2026

CVE-2026-115738

Description

SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated attacker to inject SQL queries without sanitization or parameterized queries.

Affected products

Trellix/DLP Extensionllm-fuzzy
Range: <=11.13.1

Patches

Vulnerability mechanics

References

support.trellix.com/s/article/000015949nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000